Description of problem: When creating the Interconnect manifest via Service Telemetry Operator, the duration of the certificate is not exposed to the `generateCaCert` parameter, resulting in certificates being created with a default expiration time of 90 days. The result of this is that in RHOSP 13 and RHOSP 17.0 deployments using SSL configuration for the metrics_qdr service, a cloud update needs to be performed every 90 days with the new CA certificate contents to allow for data to transit the QDR bus to STF. As part of the certificate manager refectoring and migration, we should allow control of the certificate duration so that it can be more than 90 days before certificates are rotated. Version-Release number of selected component (if applicable): STF 1.3 and STF 1.4, AMQ Interconnect, AMQ Cert Manager How reproducible: Always
Updating this to have a FIV for the STF 1.5.1 release and moving to VERIFIED.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Moderate: Service Telemetry Framework 1.5 security update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2023:1529